bundles/postfix: add SPAM BLOCKLIST check for every non-private IP attached to the server

bundles/postfix/metadata.py

@@ -4,6 +4,7 @@ defaults = {
     'apt': {
         'packages': {
             'postfix': {},
+            'python3-dnsq': {},
         },
     },
     'icinga2_api': {
@@ -91,3 +92,28 @@ def iptables(metadata):
             'port_rules': rules,
         },
     }
+
+
+@metadata_reactor.provides(
+    'icinga2_api/postfix/services',
+)
+def icinga2(metadata):
+    services = {}
+
+    for ip_type in repo.libs.tools.resolve_identifier(repo, node.name).values():
+        for ip in ip_type:
+            if not ip.is_private:
+                services[f'SPAM BLOCKLIST {ip}'] = {
+                    'command_on_monitored_host': f'/usr/local/share/icinga/plugins/check_spam_blocklist {ip}',
+                    'vars.sshmon_timeout': 60,
+                    'check_interval': '15m',
+                    'retry_interval': '5m',
+                }
+
+    return {
+        'icinga2_api': {
+            'postfix': {
+                'services': services,
+            },
+        },
+    }